32ea3763163c41d8ba0a3518616c4a18_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32ea3763163c41d8ba0a3518616c4a18_JaffaCakes118
Size

414KB
MD5

32ea3763163c41d8ba0a3518616c4a18
SHA1

c1399c55eec4cbc3b10d6f2fbf8b05da3f7f25ca
SHA256

8ead4332f067847f515df497bb057159a37f1d6c639a9d7f9c44d14f03db7de0
SHA512

b51e9c8d786c18b97015eae33cefe46c05539743211aab9574eb2f57ab009e3ded1c458dd697ea3d393d823fe9615b3808028309502a8108afb727049f70087f
SSDEEP

12288:Kn3PmrkNkVhkkuK2Qtm98oQ8wUDXVzwl:mPyCkPz2EG8opHlw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32ea3763163c41d8ba0a3518616c4a18_JaffaCakes118

Files

32ea3763163c41d8ba0a3518616c4a18_JaffaCakes118
.exe windows:4 windows x86 arch:x86

70c79d906725de0a20e160461957646f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameW
LoadLibraryW
ReleaseMutex
GetDriveTypeA
GetFileAttributesW
LocalFree
FindAtomA
ExitThread
SetEvent
CreateFileA
HeapCreate
GetProcessHeap
GetTickCount
GetDiskFreeSpaceW
GetCommandLineW
GetLocalTime
CloseHandle
ReleaseMutex
lstrcpynA
LoadLibraryA

user32

SetFocus
CallWindowProcA
GetComboBoxInfo
DestroyCaret
CreateWindowExA
CloseWindow
FillRect
GetKeyState
GetClipCursor
DispatchMessageA
GetDlgItem
DrawStateA
GetClassInfoA

snmpapi

SnmpUtilMemAlloc
SnmpTfxClose
SnmpUtilMemFree
SnmpTfxQuery
SnmpTfxOpen

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ